S - the expected SID of the server. For more information see the Sid field in the RPC_SECURITY_QOS structure in the MSDN. ...

-S  - the expected SID of the server. For more information     see the Sid field in the RPC_SECURITY_QOS structure in the MSDN. Using           this option requires Windows .NET Server 2003 or higher. This field can     be used only when authentication level and security package are     selected.      -P  - specifies the identity to authenticate with to     the RPC/HTTP proxy. Has the same format as for the -I option.      Also, you must specify security package (-u), authentication level      (-a), and authentication schemes (-H) in order to use this option.      -F  - the flags to pass for RPC/HTTP front end     authentication. The flags may be specified as numbers or names     The currently recognized flags are:         Use SSL - 1 or ssl or use_ssl         Use first auth scheme - 2 or first or use_first     See the Flags field in RPC_HTTP_TRANSPORT_CREDENTIALS for more      information. Also, you must specify security package (-u) and      authentication level (-a) in order to use this option.      -H  - the authentication schemes to use for     RPC/HTTP front end authentication. This option is a list of numerical     values or names separated by comma. E.g. Basic,NTLM. Recognized values     are (names are not case sensitive:         Basic - 1 or Basic         NTLM - 2 or NTLM         Certificate - 65536 or Cert     Also, you must specify security package (-u) and authentication level      (-a) in order to use this option.      -B  - the server certificate subject. For     more information, see the ServerCertificateSubject field in the     RPC_HTTP_TRANSPORT_CREDENTIALS structure in the MSDN. You must use     SSL for this option to work. Also, you must specify security package      (-u) and authentication level (-a) in order to use this option.      -b - retrieves the server certificate subject from the certificate sent     by the server and prints it to a screen or a log file. Valid only when     the Proxy Echo only option (-E) and the use SSL options are specified.     Also, you must specify security package (-u) and authentication level      (-a) in order to use this option.      -R - specifies the HTTP proxy. if it's 'none', we will not use HTTP proxy but     directly attempt the RPC proxy. the value 'default' means to use the IE     settings in your client machine. any other value will be treated as the     explicit HTTP proxy. if you don't specify this flag, the default value     is assumed, that is, the IE settings are checked. this flag is valid     only when the -E (Echo Only) flag is enabled.